Type of Alert: Data breach of major US credit scoring agency
What is Stolen: Personal credit information.
Who is Affected: People who have applied for T-Mobile credit between Sept 1, 2013 and Sept 15, 2015.
Description:
A hacker has acquired the records of 15 million T-Mobile customers and people who had applied for credit, the company reported Thursday.
The breach, which lasted for two years, occurred at Experian, the vendor that processes T-Mobile’s credit applications, T-Mobile CEO John Legere said in a post on the site.
Experian North America said in a notice that one of its business units was compromised, but that its consumer credit bureau was not affected.
Experian immediately secured the server and began an investigation. It has notified both U.S. and international law enforcement. Experian North America’s parent company, Experian is headquartered in Dublin, Ireland.
“The investigation is ongoing, but what we know right now is that the hacker acquired the records of approximately 15 million people, including new applicants requiring a credit check for service or device financing from September 1, 2013 through September 16, 2015,” Legere wrote.
In a refreshing change from the corporate-speak often used by CEOs whose businesses are breached, T-Mobile’s Legere stayed true to form with his directness.
“Obviously I am incredibly angry about this data breach,” he said, saying he would conduct a “thorough review” of his company’s relationship with Experian but that his top concern for now was “assisting any and all consumers affected.”
